Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)Oct 16, 2026
- Low3.3ClickMigrate has Path Traversal in "revision -m" argumentOct 16, 2026
- Low3.3Stack overflow when parsing deeply nested input in pest_grammarsOct 16, 2026
- UnknownMalicious code in @flexmr/survey-client (npm)Oct 16, 2026
- UnknownIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-downl…Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsOct 15, 2026
- LowGitHub CLI allows attestation verification bypass through unescaped regex metacharactersOct 15, 2026
- LowGitHub CLI allows path traversal through unescaped request URL componentsOct 15, 2026
- Low3.3GitHub CLI partially discloses authentication tokens in outputOct 15, 2026
- Medium6.5Python Social Auth is a social authentication/registration mechanism.Oct 15, 2026
- Unknownborg extract might modify out-of-tree files when extracting maliciously crafted archivesOct 15, 2026
- High8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.EPSS 0.4%Oct 15, 2026
- Medium6.9Nuxt OG Image generates OG Images with Vue templates in Nuxt.EPSS 0.2%Oct 15, 2026
- High7.5OpenNext Cloudflare is an open Next.js adapter for Cloudflare.EPSS 0.3%Oct 15, 2026
- Medium6.5Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.EPSS 0.6%Oct 14, 2026
- Low3.3Talos Linux is a Linux distribution built for Kubernetes deployments.EPSS 0.1%Oct 14, 2026
- High7.8mise manages dev tools like node, python, cmake, and terraform.EPSS 0.2%Oct 14, 2026
- UnknownException tags can cause host data structures to be unalignedOct 14, 2026
- Medium6.2Component-model handle tables are capped only per instance and charged to no limitOct 14, 2026
- UnknownPanic when pending calls are run after a trapOct 14, 2026
- UnknownOverlapping string transcode in a fused adapter can panicOct 14, 2026
- Medium5.3Stack overflow dropping a long chain of recursive typesOct 14, 2026
- UnknownYielding in a component start function can lead to a host panicOct 14, 2026
- UnknownOut-of-bounds zero-length stream writes can panicOct 14, 2026
260 records · page 1 of 11
PreviousNext